PT-2026-54613 · Undefined · Undefined

Muni Nitish Kumar Yaddala · Published 2026-07-02 · Updated 2026-07-02 · CVE-2026-11578

Mitre

CVSS v3.1

2.7

Low

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

The Fluent Forms WordPress plugin before 6.2.5 does not properly restrict the deletion of form submission entries to the forms a restricted Manager is authorized to manage, allowing a Manager limited to specific forms to permanently delete submission entries belonging to other forms. This requires a non-default configuration in which an administrator has created at least one Manager restricted to specific forms.

Exploit

Fix

Related Identifiers

CVE-2026-11578

Affected Products

Undefined

References · 2

• 🔥 https://wpscan.com/vulnerability/3937e20f-dd46-4c2e-b170-d5e5c254b8d2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-11578 · Security Note